Systems and methods for facilitating secure remote access to sensitive data from an embedded device

• US 20040225879A1
• Filed: 05/08/2003
• Published: 11/11/2004
• Est. Priority Date: 05/08/2003
• Status: Active Grant

• Current Assignee: Sovereign Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Panasonic Electric Works Company Limited (Panasonic Holdings Corporation)
• Inventors: Nelson, Michael D.
• Granted Patent: US 7,739,493 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

A system for facilitating secure remote access to sensitive data is provided. The system includes a plurality of electronic devices. These electronic devices are under the control of an organization. The system also includes a data router. When the data router obtains sensitive data that is to be made available to remote clients, the data router secures the sensitive data and transmits the secured sensitive data over a first communication channel to an organization-controlled server. When the data router obtains other data that is to be made available to remote clients, the data router transmits the other data over the second communication channel to a third-party server.

Claims

1. A method for facilitating secure remote access to sensitive data from an embedded device, comprising:

obtaining the sensitive data;

securing the sensitive data to create secured sensitive data;

transmitting the secured sensitive data over a first communication channel to a first destination;

obtaining other data that relates to operation of an electronic device; and

transmitting the other data over a second communication channel to a second destination.

2. The method as defined in claim 1, wherein the electronic device is under the control of an organization, and wherein the first destination comprises an organization-controlled server that is under the control of the organization.

3. The method as defined in claim 2, wherein the second destination comprises a third-party server that is not under the control of the organization.

4. The method as defined in claim 3, wherein the secured sensitive data passes through the third-party server en route to the organization-controlled server.

5. The method as defined in claim 1, further comprising translating the sensitive data into a format that is consistent with a communication protocol that governs electronic communication over the first communication channel.

6. The method as defined in claim 1, further comprising translating the other data into a format that is consistent with a communication protocol that governs electronic communication over the second communication channel.

7. A data router for facilitating secure remote access to sensitive data from an embedded device, comprising:

a processor,

memory in electronic communication with the processor,

program instructions stored in the memory, the program instructions being executable by the processor to implement a method comprising;

obtaining the sensitive data;

securing the sensitive data to create secured sensitive data;

transmitting the secured sensitive data over a first communication channel to a first destination;

obtaining other data that relates to operation of an electronic device; and

transmitting the other data over a second communication channel to a second destination.

8. The data router as defined in claim 7, wherein the electronic device is under the control of an organization, and wherein the first destination comprises an organization-controlled server that is under the control of the organization.

9. The data router as defined in claim 8, wherein the second destination comprises a third-party server that is not under the control of the organization.

10. The data router as defined in claim 9, wherein the secured sensitive data passes through the third-party server en route to the organization-controlled server.

11. The data router as defined in claim 7, wherein the method implemented by the processor further comprises translating the sensitive data into a format that is consistent with a communication protocol that governs electronic communication over the first communication channel.

12. The data router as defined in claim 7, wherein the method implemented by the processor further comprises translating the other data into a format that is consistent with a communication protocol that governs electronic communication over the second communication channel.

13. A data router for facilitating secure remote access to sensitive data from an embedded device, comprising:

a data separation module that separates data into sensitive data and other data; and

a data securing module that secures the sensitive data to create secured sensitive data;

wherein the secured sensitive data is transmitted over a first communication channel to a first destination, and wherein the other data is transmitted over a second communication channel to a second destination.

14. The data router as defined in claim 13, further comprising a protocol translation module that translates the sensitive data into a first format that is consistent with a first communication protocol that governs communication over the first communication channel.

15. The data router as defined in claim 14, wherein the protocol translation module translates the other data into a second format that is consistent with a second communication protocol that governs communication over the second communication channel.

16. A data router for facilitating secure remote access to sensitive data from an embedded device, comprising:

means for obtaining the sensitive data;

means for securing the sensitive data to create secured sensitive data;

means for transmitting the secured sensitive data over a first communication channel to a first destination;

means for obtaining other data that relates to operation of an electronic device; and

means for transmitting the other data over a second communication channel to a second destination.

17. The data router as defined in claim 16, further comprising means for translating the sensitive data into a format that is consistent with a communication protocol that governs electronic communication over the first communication channel.

18. The data router as defined in claim 16, further comprising means for translating the other data into a format that is consistent with a communication protocol that governs electronic communication over the second communication channel.

19. A system for facilitating secure remote access to sensitive data from an embedded device, comprising:

a server; and

a data router that implements a method comprising;

securing the sensitive data to create secured sensitive data;

transmitting the secured sensitive data over a first communication channel to a first destination;

obtaining other data that relates to operation of an electronic device; and

transmitting the other data over a second communication channel to the server.

20. The system as defined in claim 19, wherein the electronic device is under the control of an organization, and wherein the first destination comprises an organization-controlled server that is under the control of the organization.